Legal
Privacy Policy
Last updated: September 2026
The short version
We collect what we need to take your order, deliver it, and support you afterwards — nothing more. We never sell your data. Your password is stored only as a hash, and card details never touch our servers. You can ask us to show, correct or delete your data at any time.
1. Who we are
ApparelBlast operates this online store. In this policy, "we", "us" and "our" mean ApparelBlast, the controller responsible for the personal data described below.
You can reach us about anything in this policy at support@apparelblast.store, or by post at ApparelBlast, Lahore, Pakistan.
2. What this policy covers
This policy explains what personal data we collect when you browse the store, create an account, place an order, leave a review, or contact support — and what we do with it.
It does not cover other companies' websites that we may link to. When you follow a link away from our store, that site's own privacy policy applies.
3. What we collect and why
We collect only what we need to run the store. Nothing below is sold, and none of it is used for automated decision-making that produces legal effects for you.
| Category | What it includes | Why we have it | Legal basis |
|---|---|---|---|
| Account details | Name, e-mail address, password (stored only as a hash) | To create and secure your account, and to let you sign in | Performance of a contract |
| Order details | Items and variations ordered, quantities, prices, order number, order status | To process, fulfil and support your order | Performance of a contract |
| Delivery details | Delivery address, city, postcode, country, phone number | To deliver your order and let the courier reach you | Performance of a contract |
| Payment context | Payment method chosen, whether payment succeeded, coupon code used | To take payment and apply discounts. Card numbers are handled by the payment provider and are never stored on our servers | Performance of a contract |
| Support content | Support tickets, attachments you upload, messages you send us | To answer your question and keep a record of the issue | Legitimate interest in supporting customers |
| Reviews | Your rating, review text and display name | To publish product reviews after moderation | Consent, given when you submit a review |
| Wishlist | Products you save | To show your saved items when you return | Legitimate interest in a usable store |
| Technical data | Session cookie, IP address in server logs, browser type | To keep you signed in, keep your cart, and keep the site secure | Legitimate interest in security and site operation |
6. How long we keep it
Order and invoice records are kept for as long as tax and accounting rules require, typically several years after the order.
Account data is kept while your account is open. If you ask us to delete your account, we remove your profile and wishlist and detach your identity from past orders, keeping only what we must retain for financial records.
Support tickets are kept for up to 24 months after the issue is closed. Server logs are rotated regularly.
7. How we protect it
Passwords are stored only as one-way hashes — we cannot read them, and neither can anyone who obtains the database.
Forms that change data are protected against cross-site request forgery, database queries use bound parameters, and uploaded files are validated before they are stored.
Access to the admin area is restricted to authenticated staff accounts.
No system is perfectly secure. If a breach ever affects your personal data and is likely to present a risk to you, we will notify you and the relevant supervisory authority without undue delay.
8. Your rights
Depending on where you live, you may have the right to: access the personal data we hold about you; correct it if it is wrong; ask us to delete it; object to or restrict how we use it; receive a copy in a portable format; and withdraw consent where our use is based on consent.
To exercise any of these, e-mail support@apparelblast.store. We will respond within one month. We may ask you to confirm your identity first, so that we do not disclose your data to someone else.
If you are not satisfied with our response, you have the right to complain to your local data protection authority.
9. Marketing e-mail
We send transactional e-mail — order confirmations, dispatch notices, password resets — because it is necessary to fulfil your order. This cannot be opted out of while an order is in progress.
Marketing e-mail is sent only if you ask for it. Every marketing e-mail carries an unsubscribe link, and unsubscribing takes effect immediately.
10. Children's privacy
The store is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
11. International transfers
Our hosting and e-mail providers may process data in countries other than your own. Where data leaves your jurisdiction, we rely on appropriate safeguards such as standard contractual clauses with the provider.
12. Changes to this policy
We update this policy when our practices change. The date at the top of the page always shows when it was last revised, and material changes will be highlighted on the site.
13. Contact us
Privacy questions, access requests and deletion requests all go to support@apparelblast.store.
Postal address: ApparelBlast, Lahore, Pakistan